
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139332e302f32342d3234203d3e203138313533.roa
File: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier: wJ0OIiNjTdldfLYb19hTKZ+fKESqf6C7MeF3YvJI8Ys=
Subject key identifier: 14:02:DC:5A:C9:18:0B:7F:19:02:C5:21:F0:23:28:DB:AC:37:68:F4
Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial: 608167623079FCBAEAD12E73D0F267F21D1944AE
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139332e302f32342d3234203d3e203138313533.roa
Signing time: Sun 03 May 2026 02:40:32 +0000
ROA not before: Sun 03 May 2026 02:35:32 +0000
ROA not after: Sun 02 May 2027 02:40:32 +0000
asID: 18153
IP address blocks: 202.72.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:81:67:62:30:79:fc:ba:ea:d1:2e:73:d0:f2:67:f2:1d:19:44:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Validity
Not Before: May 3 02:35:32 2026 GMT
Not After : May 2 02:40:32 2027 GMT
Subject: CN=1402DC5AC9180B7F1902C521F02328DBAC3768F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:00:43:d4:6f:34:b7:81:43:31:d1:8d:80:
66:5c:94:25:bf:2f:1b:49:41:fd:12:09:df:0c:fc:
e9:00:4d:69:7a:01:00:48:21:4a:2f:56:85:06:7a:
25:0e:53:14:92:02:53:d2:7c:43:ef:2f:7f:5a:7d:
62:5c:d2:bf:90:62:d8:73:7e:71:dc:dc:ed:ee:a5:
3e:74:2f:7e:7e:66:00:25:9e:d4:f0:be:f0:5b:25:
8a:0a:4d:46:4f:38:0e:2a:3d:41:8f:e7:47:a5:83:
9b:06:b4:53:0c:c6:fe:13:4d:fd:19:8e:cb:b2:d5:
dc:f3:d7:42:96:6b:c8:ac:6d:cb:b0:97:c2:e5:a0:
72:e5:a9:01:45:18:68:90:50:9b:b8:7f:1a:ba:2b:
8e:b7:8b:d1:db:11:f7:72:bc:9d:79:a5:bc:c5:25:
72:6c:61:9f:da:1b:8a:5a:52:bc:a9:34:f1:a6:d8:
e8:97:46:49:16:e7:ff:92:8c:01:0a:d5:e0:71:16:
2c:40:a9:cb:de:02:52:c1:4a:d8:e5:6a:44:2e:12:
de:60:04:8b:1c:98:cc:5e:06:e2:44:db:37:29:a8:
68:5a:ce:af:73:f3:f1:f2:51:ab:33:c0:b7:56:47:
fc:32:c4:f7:e0:14:2e:da:2c:7b:0a:70:22:99:01:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:02:DC:5A:C9:18:0B:7F:19:02:C5:21:F0:23:28:DB:AC:37:68:F4
X509v3 Authority Key Identifier:
keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139332e302f32342d3234203d3e203138313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.72.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6c:5f:c0:86:0a:12:84:59:b0:aa:3b:20:f6:70:21:5a:af:
dc:96:1d:89:fc:14:45:03:27:e4:af:2e:55:4c:67:fe:5f:9b:
9e:a1:eb:dc:2c:e6:d5:52:1e:51:26:37:ff:a3:9c:9a:f7:61:
f0:1c:83:2d:8c:c0:da:ee:0d:a2:d9:e2:1f:9e:94:07:b8:8e:
09:1e:f4:ab:fb:4b:5d:d1:46:2e:3b:83:8a:91:b2:e8:60:57:
de:ba:33:48:fb:79:9b:48:a0:cd:75:52:6f:07:e1:cb:fa:72:
02:91:73:10:38:3e:3e:fc:56:75:c2:2a:06:33:49:df:77:be:
8a:f2:95:9b:a7:a8:39:c0:df:fe:f6:58:ce:22:f7:50:49:30:
64:c5:22:1d:59:84:96:45:48:9a:ad:ab:0a:00:50:d7:c8:7b:
08:3f:64:ab:4c:1a:da:b2:2d:e7:04:a8:be:14:ca:95:87:29:
e3:00:3d:dc:7b:59:91:4f:9b:72:99:7f:6e:43:e3:c5:b1:72:
90:d6:92:58:f2:f2:1e:7e:80:f1:b5:ee:db:98:2a:30:43:11:
97:3f:cd:7f:5b:ab:b3:83:99:a6:47:ac:25:5f:a9:83:f9:7b:
5d:22:6a:bc:5f:d7:6e:2e:a9:96:aa:32:43:10:a2:da:d3:8d:
71:53:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:33 2026 by rpki-client